From: Aaron Wolfe (aawolfegmail.com)
Date: Fri Sep 07 2007 - 04:01:56 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On 9/7/07, Proniewski Patrick <patrick.proniewskiuniv-lyon2.fr> wrote:
>
> On 7 sept. 07, at 09:23, Aaron Wolfe wrote:
>
> > I've seen this for a couple weeks and it has been discussed today
> > on the
> > spamassassin user list. It seems to be a new poorly written bot that
> > doesn't go away after getting a 5xx. Many of us then are seeing a
> > large
> > increase in concurrent SMTP sessions that don't do anything.
> >
> > You can make things better by reducing the smtpd timeout value to a
> > lower
> > setting than the default 300 seconds, i.e.
> >
> > smtpd_timeout = 45s
> >
> > in main.cf
> >
> > This does violate RFC recommendation of 300 seconds, it might cause
> > trouble
> > if you have very slow valid connections, and it isn't really a
> > "fix" but it
> > helps a lot.
> > -Aaron
>
>
> You might want to increase the number of smtpd (see master.cf).

I suppose you might, if you'd prefer the spambots to waste even more of your
resources than they are now. For some servers the number of connections is
already in the thousands according to discussion on the SA list. My own
servers were getting a few hundred bogus connections hanging around with a
default timeout of 300s, down to ~40 with a timeout of 45s.

Patrick PRONIEWSKI
> --
> Administrateur Système - SENTIER - Université Lumière Lyon 2
>
>

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]